Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa
File: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (raw, json)
Hash identifier: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=
Subject key identifier: 16:90:56:B2:F5:0A:9B:46:4C:05:56:EB:54:DE:AC:FB:B9:C5:34:B5
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019425FDC3F3D921827DC26AC62A7E034D66
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51914
IP address blocks: 91.221.128.0/23 maxlen: 23
91.221.128.0/24 maxlen: 24
91.221.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:f3:d9:21:82:7d:c2:6a:c6:2a:7e:03:4d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169056b2f50a9b464c0556eb54deacfbb9c534b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:3d:f5:83:db:e6:06:6a:a2:c2:ed:49:37:
19:e2:61:4f:ba:a1:4f:c0:40:80:34:87:ab:11:40:
9f:71:31:60:e0:ae:b3:98:75:43:9a:3e:14:9d:8c:
c9:22:10:78:eb:84:28:6d:65:57:f2:07:4f:9d:17:
98:f8:38:cc:85:dd:16:45:b2:fe:a6:34:08:d4:8b:
19:f2:64:8b:0d:2d:84:0c:36:06:38:1b:74:ed:5c:
97:6a:40:fc:72:67:53:ad:56:21:e3:c1:bc:ec:78:
91:2b:c5:92:92:73:07:b9:c7:a4:74:a3:3e:64:25:
0a:dd:f4:ed:a1:9d:b9:32:85:67:ae:e3:8d:38:36:
bb:44:d5:98:52:f9:2f:d4:3c:f4:67:68:5d:0d:1f:
b1:f2:e3:8f:1e:e0:2a:86:65:58:22:9d:74:3b:9d:
37:2c:43:58:f5:e1:6e:d7:5f:8b:27:1d:af:8f:00:
72:de:1f:0b:bc:12:5a:81:e2:3e:3e:a5:be:06:04:
8c:5b:44:45:8d:16:49:b3:ad:77:a6:68:ac:40:6b:
54:62:1d:e1:95:02:09:5c:d8:1c:dc:34:30:81:17:
33:9a:1e:ae:32:74:58:02:ed:c9:29:27:74:e0:c2:
ae:87:97:c3:d2:74:6a:5e:8d:ac:b0:2b:32:9c:1f:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:56:B2:F5:0A:9B:46:4C:05:56:EB:54:DE:AC:FB:B9:C5:34:B5
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.128.0/23
Signature Algorithm: sha256WithRSAEncryption
52:59:37:90:26:41:4f:72:f4:5b:39:cb:15:ad:32:93:08:0e:
4f:53:b1:16:50:4e:55:af:53:90:e6:18:3c:c7:c2:c6:bb:1d:
36:e5:87:4e:17:cc:d8:8e:e4:de:91:34:4b:92:45:fe:8d:43:
3c:26:f5:12:9a:cd:61:8f:9c:12:ec:b5:a8:91:c1:9e:5c:75:
c2:15:5a:21:ef:30:5e:45:48:3d:cc:c6:dc:f8:d2:72:b9:5b:
f1:47:8b:47:ca:de:16:94:06:29:52:69:1d:ad:22:42:93:43:
49:07:e1:29:69:f8:e4:0e:bb:e9:66:94:a3:1f:4b:2b:89:6b:
25:63:da:9e:42:fb:f1:54:0e:70:e6:f4:05:15:ba:18:ca:13:
06:85:b5:d7:22:a9:af:10:4a:b6:8a:c1:34:bd:31:25:3c:92:
8e:a5:4f:e4:6f:38:0a:92:4e:4f:33:e7:17:10:57:13:3e:af:
92:1a:c2:f7:77:00:2a:48:f8:bc:5d:be:b9:ee:bb:6a:82:1e:
a9:c3:49:cc:a9:6d:4a:c3:2d:31:1a:27:3b:ac:01:f4:d6:59:
0b:48:cf:18:a4:c2:14:a9:33:58:ea:20:f2:8c:26:6a:94:95:
dc:35:c5:86:95:a4:ae:ec:3a:a6:32:a5:fe:09:3a:4a:5c:ff:
4d:0d:28:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/cPz2SGCfcJqxip+A01mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNDNkZDg1ZmEwMWViZWMwMWVlMzMxYTEzMTc5ZThhMzNk
OTAyMmYwHhcNMjUwMTAyMDc0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjkwNTZiMmY1MGE5YjQ2NGMwNTU2ZWI1NGRlYWNmYmI5YzUzNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBI99YPb5gZqosLtSTcZ4mFPuqFP
wECANIerEUCfcTFg4K6zmHVDmj4UnYzJIhB464QobWVX8gdPnReY+DjMhd0WRbL+
pjQI1IsZ8mSLDS2EDDYGOBt07VyXakD8cmdTrVYh48G87HiRK8WSknMHucekdKM+
ZCUK3fTtoZ25MoVnruONODa7RNWYUvkv1Dz0Z2hdDR+x8uOPHuAqhmVYIp10O503
LENY9eFu11+LJx2vjwBy3h8LvBJageI+PqW+BgSMW0RFjRZJs613pmisQGtUYh3h
lQIJXNgc3DQwgRczmh6uMnRYAu3JKSd04MKuh5fD0nRqXo2ssCsynB9nMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBaQVrL1CptGTAVW61TerPu5xTS1MB8GA1UdIwQY
MBaAFBFD3YX6AevsAe4zGhMXnooz2QIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVVQZGhmb0I2LXdCN2pNYUV4ZWVpalBaQWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82Y2RkY2EtZmFkNy00NDk0LWJjMTQt
MDBhYmM0NzFmOWMxLzEvRnBCV3N2VUttMFpNQlZiclZONnMtN25GTkxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82Y2RkY2EtZmFkNy00NDk0LWJjMTQtMDBhYmM0NzFmOWMx
LzEvRVVQZGhmb0I2LXdCN2pNYUV4ZWVpalBaQWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW92AMA0G
CSqGSIb3DQEBCwUAA4IBAQBSWTeQJkFPcvRbOcsVrTKTCA5PU7EWUE5Vr1OQ5hg8
x8LGux025YdOF8zYjuTekTRLkkX+jUM8JvUSms1hj5wS7LWokcGeXHXCFVoh7zBe
RUg9zMbc+NJyuVvxR4tHyt4WlAYpUmkdrSJCk0NJB+EpafjkDrvpZpSjH0sriWsl
Y9qeQvvxVA5w5vQFFboYyhMGhbXXIqmvEEq2isE0vTElPJKOpU/kbzgKkk5PM+cX
EFcTPq+SGsL3dwAqSPi8Xb657rtqgh6pw0nMqW1Kwy0xGic7rAH01lkLSM8YpMIU
qTNY6iDyjCZqlJXcNcWGlaSu7DqmMqX+CTpKXP9NDSgg
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:12 2025 by rpki-client